Various types of controls

Question 1

A _____ security control provides the guidance, policies, and procedures for implementing a secure environment, such as an acceptable use policy.

Answer 1

managerial

Question 2

An _____ security control refers to an item that can physically be touched. Operational controls are used to prevent or detect unauthorized access to physical areas, systems, and assets.

Answer 2

operational

Question 3

A _____ security control includes hardware or software mechanisms used to protect assets. Antivirus software, firewalls, and intrusion detection systems are examples of a _____ control.

Answer 3

technical

Question 4

A _____ control aims to prevent security incidents in a system. Security training and change management are examples of a _____ security control.

Answer 4

preventive

Question 5

A _____ control identifies when incidents or vulnerabilities have occurred. Auditing and monitoring are examples of _____ controls.

Answer 5

detective

Question 6

A _____ control does not prevent an attack, but it can restore functionality of systems through other means such as a backup.

Answer 6

compensating

Question 7

A _____ control responds to and fixes an incident and may prevent reoccurrence. Antivirus software is an example of a _____ control.

Answer 7

corrective

Question 8

A _____ control may not physically or logically prevent access, but rather psychologically discourages an attacker from attempting an intrusion. A warning sign is an example of a _____ control.

Answer 8

deterrent